deep-interview
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a 'Decision feedback protocol' that executes a local Python script (
utilities/skill-builder/scripts/record_skill_feedback.py) to persist interview outcomes. This command utilizes arguments such as notes and decisions derived from user interaction. - [PROMPT_INJECTION]: The skill is designed to process external documents or topics, which introduces a surface for indirect prompt injection.
- Ingestion points: Document content or topics provided via the
$ARGUMENTSvariable. - Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded commands within the ingested content.
- Capability inventory: The agent has the ability to append insights to local files and execute a local Python script via subprocess.
- Sanitization: No specific sanitization or escaping of the processed document content is mentioned before it is summarized or used to generate interview questions.
- [COMMAND_EXECUTION]: The skill reads local persona and configuration files from
~/.codex/USER_PROFILE.mdand~/.codex/AGENTS.mdto align behavior with user preferences.
Audit Metadata